Fortinet NSE4_FGT-6.0 問題集

質問 1：
Examine the exhibit, which shows the partial output of an IKE real-time debug.

Which of the following statement about the output is true?
A. Extended authentication (XAuth) was successful.
B. The VPN is configured to use pre-shared key authentication.
C. Remote is the host name of the remote IPsec peer.
D. Phase 1 went down.
正解：B

質問 2：
Which of the following static routes are not maintained in the routing table?
A. Named Address routes
B. ISDB routes
C. Dynamic routes
D. Policy routes
正解：D

質問 3：
Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.)
A. Cost
B. Metric
C. Priority
D. Distance
正解：C,D

質問 4：
Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.

What are the expected actions if traffic matches this IPS sensor? (Choose two.)
A. The sensor will gather a packet log for all matched traffic.
B. The sensor will reset all connections that match these signatures.
C. The sensor will not block attackers matching the A32S.Botnet signature.
D. The sensor will block all attacks for Windows servers.
正解：A,D

質問 5：
Which action can be applied to each filter in the application control profile?
A. Allow, monitor, block and learn
B. Allow, monitor, block, and quarantine
C. Block, monitor, warning, and quarantine
D. Allow, block, authenticate, and warning
正解：B

質問 6：
Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)
A. Log backups from the CLI cannot be restored to another FortiGate.
B. Log backups from the CLI can be configured to upload to FTP as a scheduled time
C. Log downloads from the GUI are stored as LZ4 compressed files.
D. Log downloads from the GUI are limited to the current filter view
正解：A,B

質問 7：
View the exhibit.

Which of the following statements are correct? (Choose two.)
A. This is a redundant IPsec setup.
B. This setup requires at least two firewall policies with the action set to IPsec.
C. Dead peer detection must be disabled to support this type of IPsec setup.
D. The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.
正解：A,D

質問 8：
If the Services field is configured in a Virtual IP (VIP), which of the following statements is true when central NAT is used?
A. The Services field is used when several VIPs need to be bundled into VIP groups.
B. The Services field does not allow multiple sources of traffic, to use multiple services, to connect to a single computer.
C. The Services field does not allow source NAT and destination NAT to be combined in the same policy.
D. The Services field removes the requirement of creating multiple VIPs for different services.
正解：D